eEye Digital Security

Blink 4.0 Beta - clean install (no upgrade) on Win2K pro.

The only issue that I have experienced with Blink 4.0 Beta, is with logging onto some websites - such as my.yahoo.com as well as a financial website I use. I even had difficulty bringing up the tags to select for this post. The problem appears to be latency related, as no alerts pop up and no related events are logged. The pages just stall and time out.

I have determined that by disabling Blink's Firewall, I can avoid the page timeout behavior. Otherwise, with the Firewall on, I can consistantly reproduce this page load timeout behavior. My Firewall rules should be very close to, if not exactly, the defaults from installation. I have checked both the System Wide Rules and the Application Rules, but could not identify any that looked as if they could be a factor. If there is a Firewall rule (either hidden or listed) denying these page loads, then I would expect each deny action to be logged as an event. Since there are no related events in the log, I suspect a latency issue in Blink's Firewall processes.

Other than that, I like the evolution I see in Blink 4.0 from Blink 3.x. I am impressed at how light-weight Blink is, for all that it does - and I like eEye's approach to end point security.

Thanks eEye - keep up the good work.

-Mike 

I found a similar issue.  I have 30Mbps cable, but I can only utilise my full bandwidth with multiple threads..

However, with Blink 4.0b, I can only reach 200kb/s, instead of the 2.5Mb/s I'm used to.  (Yeah, I know, boo hoo)

I haven't taken the time to figure out which module causes it.

Can you please switch the firewall in passive mode (from the options and settings dialog) and let us know if you still see this issue?

Passive Mode testing results: 

I have set my Firewall to Passive Mode (from Options) and tested against the sites which I had previously experienced timeout problems. I have not experienced any timeouts while in passive mode. This seems to be as effective as disabling the the Firewall, which is the workaround I had previously found effective.

I hope this information helps. Let me know if you have any other ideas to test. 

Now if you look at the firewall events logged in Blink while in passive mode, you might find which firewall rules are missing.

 If you export your logs to a csv file and send it to us along with the machine,xml file from Blink's Config folder we can take a look at it to see what happens there. Send to blink.eap@eeye.com

Thanks!

Thanks Laurentiu Nicula,

I have sent those files as requested.

I sent them with attention to your name, for reference. Hope that data helps

-Mike